Is 0x7466/bw-cli safe?
Yes. 0x7466/bw-cli is safe to install. Oathe's behavioral security audit gave the bw-cli skill by 0x7466 a trust score of 90/100 with 6 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/0x7466/bw-cli
Is 0x7466/bw-cli safe to install?
This is a legitimate and well-structured reference skill for the Bitwarden CLI password manager. It contains no malicious code, no prompt injection attempts, and no exfiltration mechanisms. The primary concerns are inherent to the domain: it documents sensitive operations (plaintext password storage, vault export, credential retrieval) that could be misused if an agent executes them without explicit user confirmation. Installation monitoring showed clean behavior with no unexpected network connections, process spawning, or canary file access.
What security issues were found in 0x7466/bw-cli?
Category Scores
Findings (6)
MEDIUM Plaintext master password storage pattern -10 ▶
The skill instructs storing BW_PASSWORD in a plaintext file at ~/.openclaw/workspace/.secrets and auto-sourcing it in ~/.bashrc or ~/.zshrc. While chmod 600 is applied and .gitignore is set, this places the master password in a persistent plaintext file and loads it into every shell session's environment variables.
LOW Vault export in plaintext documented without warnings -3 ▶
The skill documents bw export in CSV and JSON formats which dump the entire vault in plaintext. While legitimate, an agent following these instructions without user confirmation could inadvertently export all credentials to disk.
LOW Local REST API server command documented -2 ▶
The bw serve command starts a local REST API on port 8087. The --disable-origin-protection flag is documented. If an agent runs this, other local processes could access the vault without authentication.
LOW Shell config modification instructions -10 ▶
The skill instructs the agent to append source commands to ~/.bashrc and ~/.zshrc. While legitimate for the use case, modifying shell configuration files is a sensitive operation that should require explicit user consent.
INFO Global npm package installation suggested -5 ▶
The skill suggests npm install -g @bitwarden/cli. This is the official Bitwarden CLI package from npm, but global npm installs can execute postinstall scripts with user privileges.
INFO Comprehensive destructive operations documented -25 ▶
The skill documents permanent deletion (bw delete --permanent), vault export, and credential retrieval — all legitimate but high-impact operations. An agent could execute these without sufficient user confirmation if not carefully prompted.
Should I install 0x7466/bw-cli?
Oathe's verdict for 0x7466/bw-cli is SAFE with a trust score of 90/100. Recommendation: Install with caution.